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Abstract 
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We study the communication complexity of symmetric XOR functions, namely functions 
/ : {0, 1}" x {0, 1}™ — > {0, 1} that can be formulated as f(x, y) = D{\x (By\) for some predicate 
D : {0, 1, n} —?■ {0, 1}, where \x © y\ is the Hamming weight of the bitwise XOR of x and y. 
We give a public-coin randomized protocol in the Simultaneous Message Passing (SMP) model, 
with the communication cost matching the known lower bound for the quantum and two-way 
model up to a logarithm factor. As a corollary, this closes a quadratic gap between quantum 
lower bound and randomized upper bound for the one-way model, answering an open question 
! raised in Shi and Zhang [SZ09] . 



1 Introduction 



Communication complexity quantifies the minimum amount of communication needed for two 
(or sometimes more) parties to jointly compute some function /. Since introduced by Yao 
| [Yao79j . it has attracted significant attention in the last three decades, not only for its elegant 

I/"") ■ mathematical structure but also for its numerous applications in other computational models 

^ ! |KN97llLSn9] . 

The two parties involved in the computation, usually called Alice and Bob, can communicate 
in different manners, and here we consider the three well-studied models, namely the two-way 
model, the one-way model and the simultaneous message passing (SMP) model. In the two-way 
model, Alice and Bob are allowed to communicate interactively in both directions, while in the 
one-way model, Alice can send message to Bob and Bob does not give feedback to Alice. An 
even weaker communication model is the SMP model, where Alice and Bob are prohibited to 
exchange information directly, but instead they each send a message to a third party Referee, 
who then announces a result. A randomized protocol is called private-coin if Alice and Bob each 
flip their own and private random coins. If they share the same random coins, then the protocol 
is called public-coin. The private coin model differs from the public coin model by at most an 
additive factor of O(logn) in the two-way and one-way models New!) 1 1. 

We use R prlv (f) to denote the communication complexity of a best private-coin randomized 
protocol that computes / with error at most 1/3 in the two-way protocol. Similarly, we use 
the i?H'P rTO (/) to denote the communication complexity in the private-coin SMP model, and 
B}' priv {f) for the private-coin one-way model. Changing the superscript "priv" to "pub" gives 
the notation for the communication complexities in the public-coin models. If we allow Alice and 
Bob to use quantum protocols, then Q(f),Q 1 (f), Q"(/) represent the quantum communication 
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complexity in two-way model, one-way model and SMP model, separately. In the quantum case 
the communication complexity is evaluated in terms of the number of qubits in the communica- 
tion. If Alice and Bob share prior entanglement, then we use a star in the superscript to denote 
the communication complexity. 

Arguably the most fundamental issue in communication complexity is to determine the 
largest gap between the quantum and classical complexity. In particular, there is no super- 
constant separation between quantum and classical complexities in the one-way model; actually, 
it could well be the truth that they are the same up to a constant factor for all total Boolean 
functions. 

One way to understand the question is to study special classes of functions. An important 
class of Boolean functions is that of XOR functions, namely those in the form of f(x © y) where 
x © y is the bitwise XOR of x and y. Some well studied functions such as the Equality function 
and the Hamming Distance function are special cases of XOR functions. XOR functions belong 
to a larger class of "composed functions" ; see [LZ10] for some recent studies. 

While the general XOR function seems hard to study, recently Shi and Zhang |SZ09j con- 
sidered symmetric XOR functions, i.e. f(x(By) = D(\x(By\) for some D : {0, 1, n} — > {0, 1}. 
Define ro and r\ to be the minimum integers such that ro,fi < n/2 and D{k) = D(k + 2) for 
all k € [ro,n — r±) and set r = max{ro,ri}. Shi and Zhang proved that the quantum lower 
bound for symmetric XOR functions in the two-way model is f2(r), and on the other hand, they 
also gave randomized protocol in communication of 0{r) in the two-way model and 0(r 2 ) in 
the one-way model. Pinning down the quantum and randomized communication complexity of 
symmetric XOR functions in the one-way model was raised as an open problem. 

In this work, we close the quadratic gap by proving a randomized upper bound of O(r), 
which holds even for the SMP model. Namely, 

Theorem 1 For any symmetric XOR function f , 

R\\>P ub (f) = 0(rlog 3 r/loglogr) (1) 

Combining this upper bound with Shi and Zhang's quantum lower bound in the two-way 
model, we have the following. 

Corollary 2 The randomized and quantum communication complexities of symmetric XOR 
functions are Q(r), in the two-way, the one-way and the public-coin SMP models. 

A good question for further exploration is the private-coin SMP model. 

2 Preliminaries 

In this part we review some known results on the randomized and quantum communication 
complexity of the Hamming Distance function and the Equality function. 

Let Ham^' be the boolean function such that HamJ^(x, y) — 1 if and only if the two n-bit 
strings x and y have Hamming distance at most d. Yao [Yao03] showed a randomized upper 
bound of 0(d 2 ) in the public-coin SMP model, lated improved by Gavinsky, Kempe and de Wolf 
[GKdW04j to O(dlogn) and further by Huang, Shi, Zhang and Zhu |HSZZ06j to Q(dlog d). 
Let WDd^ denote the O(dlogdlog(l/e))-cost randomized protocol by repeating the [HSZZ06 
protocol for 0(log(l/e)) times so that the error probability is below e. 

The parity function Parity(x) is defined as Parity(a;) = 1 if and only if \x\ is odd. 

A function / : {0, 1}" x {0, 1}" {0, 1} is a symmetric XOR function if f{x, y) = S(x © y) 
for some symmetric function S. That is, f(x, y) = D(\x © y\) where D : {0, 1, . . . , n} — > {0, 1}. 
Let D(k) = D(n — k) and S(x, y) = D(\x®y\). Define ro and n to be the minimum integers such 
that ro,ri < n/2 and D(k) = D(k + 2) for all k € [ro,n— ri); set r = max{ro,ri}. By definition, 
D(k) only depends on the parity of k when k g [ro,n — r{\. Suppose D(k) — T(Parity(fc)) for 
k £ [ro, n — ri ] (for some function T). 

All the logarithms in this paper are based 2. 
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3 A public-coin protocol in the SMP model 



This section gives the protocol in Theorem [T] We will first give a subprocedure Vk which 
computes the function in the special case of \x © y\ < k. It is then used as a building block for 
the general protocol V. 

In the protocols we will use random partitions. A random k-partition of [n] is a random 
function p mapping [n] to [k], i.e. mapping each element in [n] to [k] uniformly at random and 
independently. We call the set {i <E [n] : p(i) = j} the block B(j). A simple fact about the 
random partition is the following. 

Lemma 3 For any string z G {0, 1}™ with at most k l's, a random k-partition has 

Vr[All k blocks have less than c l's] > 1 - 0{l/k 2 ). (2) 
where c — 4 log k / log log k . 

Proof Consider the complement event. There are k possible blocks to violate the condition, 
choices for the c l's (out of k l's) put in the "bad" block, and for each of these l's, the 
probability of it mapped to the block is 1/fc. Thus the union bound gives 

(k\ 1 ek 1 e 

• — < ( — ) c ■ — T = (-) c • k (3) 
C / A/ C K C 

It is easily verified that the chosen c makes this bound 0(1/ k 2 ). □ 

Now the protocol P/c is as in Box Vk ■ Recall that TLVd^ is the 0(dlogdlog(l/e)) randomized 
protocol with error probability below e. 

Box V k : 

A public-coin randomized protocol Vk for functions f(x,y) = D(\x © y\), 
with promise \x © y\ < k, in the SMP model 

Input: x £ {0, 1}™ to Alice and y € {0, 1}™ to Bob, with promise \x © y\ < k 
Output: One bit / by Referee satisfying / = f(x,y) with probability at least 0.9. 

Protocol: 
Alice and Bob: 

1. Use public coins to generate a common random fc-partition [n] = \t)!? =1 B(i). 

2. for i = 1 to k 

for j — to c = 4 log k / log log k 

run (Alice and Bob's part of) the protocol T-LT>j^ on input {xb(j), VbU)) 
with e = l/(10fclogc), sending a pair of messages {ma,i,j{ x B(i))i 
mb,i,j (ub (»)))■ 

Referee: 

1. for i = 1 to k 

(a) On receiving {(m a ,i,j(xB(i)),mb,i,j(yB(i))) '■ 3 = U ■ • ■ >c}. run (Referee's 
part of) the protocol 7i"Dj, e which outputs hij. 

(b) Use binary search in (ha, . . . , hi C ) to find the Hamming distance hi of 

(xB(i),VB{i))- 

2. Output D{Yll =1 hi). 
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Lemma 4 If \x®y\ < k, then Referee outputs D(\x®y\) with probability at least 0.9. The cost 
of protocol Vk is 0(k log 3 k/ log log k). 

Proof First, by LemmaOH each block contains at most c different indices i s.t. Xi ^ yi- Namely, 
the Hamming distance of x^ii) and yB(i) is at most c. Thus running the protocols TLVj^ for 
j = 0,...,c would give information to find the Hamming distance hi of (xB(i),yB(i))- in each 
block B(i), hi is correctly computed as long as each of the [logc] values hij on the (correct) 
path of the binary search is correct. Thus a union bound gives the overall error probability 
upper bounded by fc(logc)e = 1/10. The cost of the protocol is 0(k ■ c ■ clogclog(l/e)) = 
O(fclog 3 fc/loglogfc). □ 

With the protocol Vk in hand, we now construct the general protocol as in Box V . 
Box V 

A public-coin randomized protocol V for functions f{x,y) = S(x®y) in 
the SMP model 

Input: x G {0, 1}" to Alice and y e {0, 1}" to Bob 

Output: One bit b which equals to f(x,y) with probability at least 2/3. 
Protocol: 

1. Run the protocol 'H£V ,i/io and the protocol TUD n ^ ri i/ w on (x,y). 

2. Run the protocol V ra for function S on (x, y) and the protocol V ri for function 
S on (x,y). 

3. Alice: send Parity(x) 

4. Bob: send Parity (y). 

5. Referee: 

(a) If %2? ro .i/io ° n (x,y) outputs 1, then output V TQ on (x,y) and halt. 

(b) If H2?„_ rii i/io on (x, y) outputs 1, then output V Tx on (x,y) and halt. 

(c) Output T(Parity(a;) © Parity(?/)). 

Theorem 5 The protocol V outputs the correct value with probability at least 2/3, and the 
complexity cost is 0(r log 3 rj log log r). 

Proof Correctness: If |s©y| < ro, then with probability at least 0.9, the protocol WD^ ,\/w{x, y) 
outputs 1, thus Referee outputs V ro on (x,y), which equals to f(x,y) with probability at least 
0.9 by the correctness of the protocol P ro . Thus the overall success probability is at least 
0.81 > 2/3. 

If \x ® y\ > n — ri, then \x © y\ < r x and with probability at least 0.9, the protocol 
HT> ri! i/io(S, y) outputs 1, thus Referee outputs V ri {S ,x,y), which equals to 

S(x®y) =D(n- \x®y\) =D{\x®y\) (4) 

with probability at least 0.9 by the correctness of the protocol V ri - Thus the overall success 
probability is at least 0.81 > 2/3. 

If ro < \x © y\ < n — n, then the protocol proceeds to the very last step with probability at 
least 1 — 0.1 — 0.1 = 0.8. And once this happens, then Referee outputs the correct value with 
certainty, since f(x,y) = T(Parity(a; © y)) = T(Parity(a;) © Parity(y)). 

Complexity: The cost is twice of the cost of the protocol P r , plus twice of the cost of the 
protocol TLVri/iQ, plus 2, which in total is 0(r log 3 rj log log r). □ 
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